From owner-cvs-all Thu Dec 3 12:25:55 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id MAA17110 for cvs-all-outgoing; Thu, 3 Dec 1998 12:25:55 -0800 (PST) (envelope-from owner-cvs-all@FreeBSD.ORG) Received: from apollo.backplane.com (apollo.backplane.com [209.157.86.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id MAA17104 for ; Thu, 3 Dec 1998 12:25:53 -0800 (PST) (envelope-from dillon@apollo.backplane.com) Received: (from dillon@localhost) by apollo.backplane.com (8.9.1/8.9.1) id MAA00394; Thu, 3 Dec 1998 12:25:39 -0800 (PST) (envelope-from dillon) Date: Thu, 3 Dec 1998 12:25:39 -0800 (PST) From: Matthew Dillon Message-Id: <199812032025.MAA00394@apollo.backplane.com> To: cvs-all@FreeBSD.ORG Subject: icmp bandwidth limiting commited Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk I've commited the ICMP_BANDLIM kernel option as per proposal. It is not the default for the moment but I expect we will make it (or something like it) the default in a few months after it has been well tested. This feature has been successfully running on all of BEST's machine for over a month and has successfully prevented machine take-downs from network D.O.S. attacks on several dozen occassions. -Matt Matthew Dillon Engineering, HiWay Technologies, Inc. & BEST Internet Communications & God knows what else. (Please include original email in any response) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message